This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft File: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json) Hash identifier: g8sUNDgdQ5ajTOQew1DThyM3rVEcJQ8Jq9zYKSGQptg= Subject key identifier: 77:6B:F5:1F:89:D1:F5:CF:DB:0F:40:42:01:C9:AD:15:23:F7:FD:B1 Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32 Certificate issuer: /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32 Certificate serial: 019B4625F1460539157A53992D323EDFECD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft Manifest number: 1791 Signing time: Mon 22 Dec 2025 13:00:50 +0000 Manifest this update: Mon 22 Dec 2025 13:00:50 +0000 Manifest next update: Tue 23 Dec 2025 13:00:50 +0000 Files and hashes: 1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: dyrNq07Wk1X7oZu/lxObpMaEhEcXzKs/9D5Fy5E/4vk=) 2: DPoR4kUwvFP364mIcuQBwqN8-tI.roa (hash: J6AqobDr9MA8WdK/mv+gGWZFgHJa5YpnU/YQyBKG/no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:f1:46:05:39:15:7a:53:99:2d:32:3e:df:ec:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32 Validity Not Before: Dec 22 13:00:50 2025 GMT Not After : Dec 23 13:00:50 2025 GMT Subject: CN=776bf51f89d1f5cfdb0f404201c9ad1523f7fdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:b6:a0:5f:15:0a:f8:18:5f:b4:2f:76:d1: 40:1f:5c:3a:e9:c1:04:d0:a1:5a:30:7f:b1:54:45: ce:ef:36:dc:e4:f9:9d:a6:f3:ca:2a:0d:5f:86:48: 4c:a2:a2:57:8c:67:3f:e3:78:f4:be:7f:04:98:54: 92:e4:34:f9:98:37:60:3c:5b:57:b2:c2:99:c5:e2: 81:18:e4:37:87:90:a5:a1:ac:87:84:92:d0:95:12: e3:6c:13:ee:71:25:31:da:1a:11:63:29:1d:01:86: dd:00:98:85:ab:33:0c:6d:ae:88:a5:60:62:65:da: d8:c9:08:80:19:14:0b:b6:12:49:2d:30:7d:2c:00: 6d:c1:0b:d3:9c:51:27:58:2a:9a:a4:9a:8e:d3:ef: 66:e3:d1:dd:0c:0f:b7:a3:8a:a2:dd:e8:d1:6e:98: 70:83:2b:30:a0:63:86:2a:8d:79:bc:bb:39:f0:b6: 1f:8d:93:47:5c:f2:28:f0:88:1e:6a:3d:67:dc:56: c2:f4:97:7c:45:8a:12:3b:ea:a8:5c:54:58:dd:aa: 6f:9f:37:4c:a4:3d:e3:e5:2a:65:c8:a4:76:38:2c: ce:57:eb:20:8f:07:9a:d6:75:2d:22:cd:66:99:3a: 56:0d:47:c6:98:73:23:b0:77:84:2b:a7:9b:e2:cc: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6B:F5:1F:89:D1:F5:CF:DB:0F:40:42:01:C9:AD:15:23:F7:FD:B1 X509v3 Authority Key Identifier: keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:af:3b:dc:06:40:da:05:9e:f9:81:fe:de:c7:0b:1c:1d:8a: 48:1e:ee:20:ce:ef:30:8e:25:19:97:5f:22:db:b5:4d:9a:38: 0e:db:84:73:67:56:19:97:93:7c:3f:87:bf:e0:05:89:ba:69: 67:c2:49:70:bd:dc:ea:7b:df:03:49:98:ac:3d:ef:0e:90:c3: e0:14:d3:17:b5:25:4e:58:76:3f:13:23:4f:0e:06:bb:03:e1: 29:33:88:f4:d8:b8:44:1b:56:d8:65:a3:4b:b1:fb:4b:ad:7c: ad:d2:eb:59:ed:a9:56:a9:ac:8d:fd:be:f1:e2:35:11:47:76: e1:0d:30:5d:01:55:fc:e3:d0:08:a2:5b:61:3f:de:3c:9e:73: 20:c7:c6:18:d5:ba:33:f2:cd:59:f4:a8:02:9b:dd:6d:fb:73: 55:bb:7f:90:ce:8e:1e:02:33:9d:fc:dc:ac:60:89:64:1f:8b: 38:0f:a0:b2:bc:86:5c:f7:9e:ce:16:f1:da:cb:b0:80:fe:7e: 6a:d6:85:14:90:ab:55:bc:01:96:9b:19:76:01:52:56:f3:c4: 2b:94:a7:6e:13:25:f3:a5:81:09:f4:74:83:47:83:aa:ef:6c: 70:00:4a:9c:51:1a:fd:57:91:78:11:27:1a:7d:34:a5:a5:6c: 9a:2f:40:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJfFGBTkVelOZLTI+3+zWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMGJkMGVhOTVhMTkwYzcwM2E4NWUwOWViYzVlNWZkYTVj ZGNlMzIwHhcNMjUxMjIyMTMwMDUwWhcNMjUxMjIzMTMwMDUwWjAzMTEwLwYDVQQD Eyg3NzZiZjUxZjg5ZDFmNWNmZGIwZjQwNDIwMWM5YWQxNTIzZjdmZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo422oF8VCvgYX7QvdtFAH1w66cEE 0KFaMH+xVEXO7zbc5PmdpvPKKg1fhkhMoqJXjGc/43j0vn8EmFSS5DT5mDdgPFtX ssKZxeKBGOQ3h5CloayHhJLQlRLjbBPucSUx2hoRYykdAYbdAJiFqzMMba6IpWBi ZdrYyQiAGRQLthJJLTB9LABtwQvTnFEnWCqapJqO0+9m49HdDA+3o4qi3ejRbphw gyswoGOGKo15vLs58LYfjZNHXPIo8Igeaj1n3FbC9Jd8RYoSO+qoXFRY3apvnzdM pD3j5SplyKR2OCzOV+sgjwea1nUtIs1mmTpWDUfGmHMjsHeEK6eb4swQ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdr9R+J0fXP2w9AQgHJrRUj9/2xMB8GA1UdIwQY MBaAFO4L0OqVoZDHA6heCevF5f2lzc4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2d2UTZwV2hrTWNEcUY0SjY4WGxfYVhOempJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wZDVkOWYtNTgwOC00ODcxLWEyNGQt YmViZGY0Y2Q0ODViLzEvN2d2UTZwV2hrTWNEcUY0SjY4WGxfYVhOempJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wZDVkOWYtNTgwOC00ODcxLWEyNGQtYmViZGY0Y2Q0ODVi LzEvN2d2UTZwV2hrTWNEcUY0SjY4WGxfYVhOempJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJa873AZA 2gWe+YH+3scLHB2KSB7uIM7vMI4lGZdfItu1TZo4DtuEc2dWGZeTfD+Hv+AFibpp Z8JJcL3c6nvfA0mYrD3vDpDD4BTTF7UlTlh2PxMjTw4GuwPhKTOI9Ni4RBtW2GWj S7H7S618rdLrWe2pVqmsjf2+8eI1EUd24Q0wXQFV/OPQCKJbYT/ePJ5zIMfGGNW6 M/LNWfSoApvdbftzVbt/kM6OHgIznfzcrGCJZB+LOA+gsryGXPeezhbx2suwgP5+ ataFFJCrVbwBlpsZdgFSVvPEK5SnbhMl86WBCfR0g0eDqu9scABKnFEa/VeReBEn Gn00paVsmi9A2Q== -----END CERTIFICATE-----Generated at Mon Dec 22 20:49:31 2025 by rpki-client